ZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
CVE-2023-47058

7.8HIGH

Key Information:

Vendor

Adobe
Status
Premiere Pro
Vendor
CVE Published:
16 November 2023

What is CVE-2023-47058?

Adobe Premiere Pro versions 24.0 and 23.6 are vulnerable to an out-of-bounds read issue that occurs when the software parses specially crafted files. This vulnerability could allow an attacker to read beyond the allocated memory, potentially leading to arbitrary code execution in the context of the currently logged-in user. Successful exploitation necessitates user interaction, as the targeted individual must open a malicious file for the attack to proceed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Premiere Pro 0 <= 24.0

References

https://helpx.adobe.com/security/products/premiere_pro/ap...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.